ba8bd400d18c31f6bc868b9f3a4dac7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba8bd400d18c31f6bc868b9f3a4dac7f
Size

114KB
MD5

ba8bd400d18c31f6bc868b9f3a4dac7f
SHA1

bea6c7f5660d6dfa5b9a7c710bade24b6bca7c01
SHA256

16e6e3dd42bafefce37a83790e678acc0fcea5da62e873a4ad68cef0d0a61be6
SHA512

24d550cabc1153106f742d8eebe98238a40d0551c9d4d2cda596afdf7d6b94b68256becd4b78e6fc98135f18c2651b40951c26c9e41cd264a1c4677ef73e7cea
SSDEEP

1536:4oba6f30iBGNunaPSemVZmztuunOdHbIL6w/A3tWFFU38OdgiQE:vb930duFVZmBuunOdH66woYF+38sgiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba8bd400d18c31f6bc868b9f3a4dac7f

Files

ba8bd400d18c31f6bc868b9f3a4dac7f
.exe windows:5 windows x86 arch:x86

c0af6a3b0a4c968aa842f434cc0cde75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetUserDefaultLangID
VirtualFree
GetCommandLineA
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ